Application Security Engineer - Threat Modelling & Secure Coding

Open Systems Technologies; New York (NY); Sur place; USD 150 000 - 200 000; Plein temps

Résumé du poste

Open Systems Technologies is seeking an Application Security Engineer to join the team in Iselin, NJ or NYC. The role focuses on securing applications and APIs through hands-on security testing, threat modelling, and secure development practices.

The ideal candidate has experience with OWASP Top 10, various security tools (DAST/SCA), and strong programming skills in Java, Python, or JavaScript, with excellent collaboration across cross-functional teams.

Qualifications

• Experience in application security testing and vulnerability management.
• Hands-on experience with application security tools.
• Strong knowledge of OWASP Top 10 and mitigations.
• Experience with threat modelling methodologies.
• Proficiency in at least one programming language (Java/Python/JS).
• Excellent communication and collaboration skills.
• Degree in CS, Information Management, Computer Engineering, Cybersecurity or equivalent.
• Relevant security certifications (e.g. CISSP, CEH, CSSLP) or equivalent preferred.

Responsabilités

• Perform Application Security scans (e.g. DAST and SCA) on applications and APIs to identify security vulnerabilities and weaknesses
• Triage security findings and collaborate with development teams to prioritize and remediate identified vulnerabilities
• Drive threat modelling as a standard part of the SDLC, and develop and maintain threat models for critical applications, identifying potential security risks and proposing mitigations
• Drive the Security Champions program, and define and promote secure coding practices, patterns, and standards across development teams
• Conduct security reviews and provide guidance on security requirements for new features and projects
• Assist in the analysis, selection and rollout of new application security tools, processes, and standards

Connaissances

Application Security

Threat Modelling

Secure Coding

Programming (Java/Python/JS)

Formation

Bachelor's degree in CS/Engineering/Cybersecurity

Outils

DAST Tools

SCA Tools

Threat Modelling Tools

Description du poste

Open Systems Technologies is seeking an Application Security Engineer to join the team in Iselin, NJ or NYC. The role focuses on securing applications and APIs through hands-on security testing, threat modelling, and secure development practices.

The ideal candidate has experience with OWASP Top 10, various security tools (DAST/SCA), and strong programming skills in Java, Python, or JavaScript, with excellent collaboration across cross-functional teams.